Ok, ok, I know these are Google Chrome dedicated days, but how can be possible that my last post did not receive attention at all?
Maybe with this title somebody will read more carefully what I wrote few days ago ... or maybe not, who knows? :?
behind the design
My JavaScript book is out!
Don't miss the opportunity to upgrade your beginner or average dev skills.
I don't know... but your sample page didn't work in my Exploder version 6...
ReplyDeletetry to login into gmail, try to login into a form, try to save data with Internet Explorer, then try again the example page, and wait for about 10 seconds.
ReplyDeleteAndrea there's a selective media especially when it comes to security reports. I'm sure your post was read, if not I'll pass it on to someone at MS.
ReplyDeleteI've took the attitude to accept this and still post reports anyway because I enjoy it.
Thanks Gareth, the weird stuff is that nobody replied to say "what the hell are you talking about", and nobody replied to say "huston, we have a problem" :D
ReplyDeleteWhat I mean, is that right now malicious developers could steal Credit Card information from one of the most popular air company site, so I suppose my post required more attention, that's it.
I encountered the same problem when I found a hole in Safari beta which allowed cross site data reading. The media wasn't interested even though less serious vulnerabilities were plastered over the media. It seems you need a PR department these days.
ReplyDeleteDon't worry people are listening even when they don't comment. I've not verified your vulnerability but I'm a regular reader of your blog so I'm sure it's a 100% correct.
Keep up the good work and ignore the media! We are the media now ;)
Andrea
ReplyDeleteI've been in touch with MS and they are tracking it now. Thanks! They didn't spot this one